Vulnerabilidades en smub
114 resultadosCVE-2024-1447MEDIUMSydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-6256MEDIUMFeeds for YouTube (YouTube video, channel, and gallery plugin) <= 2.2.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-84909MEDIUMCustom Twitter Feeds <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode AttributeEPSS 0.4%CVE-2023-6742MEDIUMEnvira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_imagesEPSS 0.4%CVE-2024-8199MEDIUMReviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Settings UpdateEPSS 0.4%CVE-2024-0659MEDIUMEasy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing optionsEPSS 0.4%CVE-2024-5902HIGHUserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name ParameterEPSS 0.4%CVE-2025-2252MEDIUMEasy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title DisclosureEPSS 0.4%CVE-2026-15452MEDIUMSmash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query StringEPSS 0.4%CVE-2024-10876MEDIUMCharitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.3 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-3208MEDIUMSydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable GalleryEPSS 0.4%CVE-2024-13403MEDIUMWPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML ParameterEPSS 0.4%CVE-2026-88996MEDIUMWPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST ParameterEPSS 0.4%CVE-2024-5878MEDIUMMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript LibraryEPSS 0.4%CVE-2024-6692LOWEasy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement TextEPSS 0.4%CVE-2026-7526MEDIUMPDF Embedder <= 4.9.3 - Authenticated (Contributor+) Information Exposure via Block Editor PageEPSS 0.4%CVE-2025-11893MEDIUMCharitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL InjectionEPSS 0.4%CVE-2025-12484HIGHGiveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.19 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.4%CVE-2025-4670MEDIUMEasy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt ShortcodeEPSS 0.4%CVE-2026-100152MEDIUMAll in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Query ParameterEPSS 0.4%